Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
File: lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft (raw, json)
Hash identifier: CtwI3a+N5xMit7iY3ym0Z3PBW386rYLMNrR3KicHp0U=
Subject key identifier: A1:9B:1A:A8:01:BE:0F:41:90:41:21:15:35:4C:CA:B1:18:D2:22:A7
Authority key identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
Certificate issuer: /CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Certificate serial: 0199FC8FB640B87553449ADF05B97C464581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
Manifest number: 05F9
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl (hash: Mo3ChV4zdkWLvkb4qYR+xV873tjqBzHtym2vHqVNzZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b6:40:b8:75:53:44:9a:df:05:b9:7c:46:45:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=a19b1aa801be0f4190412115354ccab118d222a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:15:78:92:5f:91:20:3e:84:b4:c9:01:68:
c8:71:58:8e:d2:58:18:5d:4a:19:35:f2:93:8a:3c:
bb:47:18:e2:f4:8b:c7:b6:04:f3:40:9d:bf:2b:2f:
ab:6e:fc:3e:a0:ab:ac:bd:28:f8:89:a6:0c:2e:15:
0b:23:b7:74:1c:29:1a:e8:09:df:16:85:96:1c:80:
e7:18:91:61:9d:8d:11:0b:1d:8c:b1:63:2e:71:90:
f4:fb:67:90:fb:3e:0b:16:8a:aa:35:ad:00:3c:90:
37:06:55:82:a6:86:68:30:23:60:9d:7b:eb:1b:0d:
90:41:de:d7:7c:46:7f:09:78:37:66:21:ac:63:4b:
e3:0b:4b:b2:52:bd:1a:32:28:87:76:3e:6e:2c:b9:
4c:05:a4:de:c7:d9:3b:66:f7:00:86:1a:c4:fa:2c:
8d:f5:90:b1:cf:93:26:53:58:d0:83:ba:85:17:df:
04:59:a1:de:5b:ba:ad:b8:8e:8d:1d:91:a7:b1:cd:
85:eb:0a:e2:0b:76:32:79:c8:f5:d8:c0:28:ab:f9:
82:1f:fa:d4:50:2e:86:9c:f3:b9:d2:97:2f:2c:01:
f4:bc:b8:81:95:35:67:9f:9f:cf:da:21:25:36:4d:
3e:89:96:98:d6:fc:eb:f2:2a:f2:7d:9a:6e:7d:4c:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9B:1A:A8:01:BE:0F:41:90:41:21:15:35:4C:CA:B1:18:D2:22:A7
X509v3 Authority Key Identifier:
keyid:94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4b:43:21:30:7d:e9:5a:e2:6c:4e:fa:e7:30:a7:87:90:99:
fb:d1:83:67:3b:49:18:7d:53:fe:8f:f4:0a:71:6f:08:57:70:
32:38:e9:a6:b1:e3:2c:7d:02:c2:cb:7e:fb:81:3b:98:18:f2:
e0:a3:ff:cb:a5:7a:4b:7e:25:95:77:a5:47:ec:93:aa:43:7a:
70:1f:27:e5:08:11:47:86:4f:e7:bd:f6:0a:e9:4a:cc:81:53:
9c:3e:88:ee:56:51:0b:38:98:58:bd:a6:f1:7a:97:6b:74:95:
34:91:f0:1c:d4:9b:ba:00:b3:12:5b:4c:ce:fd:6a:c2:2d:93:
9b:46:99:dd:c0:3b:8c:fb:ae:d3:f9:85:da:45:f5:c1:25:11:
f0:fe:f9:9e:ca:fd:21:37:51:53:d5:f9:65:00:b8:4c:22:81:
4a:f6:c8:24:9c:a6:f2:91:37:15:43:82:55:12:e3:0e:23:a5:
1d:3a:9a:fb:51:bd:ab:f4:cb:a4:4a:cb:14:6d:c1:8e:0a:8e:
8c:ae:45:31:c1:fc:c4:41:31:89:e9:6a:48:4b:e9:c8:81:d2:
26:61:d2:9d:45:12:bd:ab:99:fa:7f:45:3c:28:6c:71:21:58:
90:cc:27:4c:7e:74:a1:59:3b:16:22:6d:e6:66:06:a0:85:bc:
78:6d:3d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:14 2025 by rpki-client